Wave 14 · Data, Reporting & FinOps Operations Tableau / permission audit proof Synthetic site, project, workbook, and group exports

Tableau permissions, certifications, and access drift that stay operator-readable.

This control plane turns raw Tableau access and audit drift into one review surface: permission sprawl, broken group sync, stale certification proof, external sharing risk, telemetry gaps, and the remediation packets needed before sensitive content or executive reporting paths slip out of policy.

Overview Permission Lane Audit Gaps Certification Posture Verification Docs

Commercial Front Door

Tableau permission governance and audit-readiness operations for platform, reporting, and identity teams.
Audit-safe visibility into workbook access drift, group-sync failures, certification trust, and stale external sharing without exposing live tenant credentials.

Proof Layer

Offline analyzer + CLI + dashboard surface.
This repo reads Tableau permission and audit snapshots and turns them into severity, owner, and remediation packets operators can actually use.

Why it matters

Recruiters looking for Tableau / BI admin / access governance / analytics platform should see real permission and certification work, not generic dashboard copy.

Audit Gaps

severity · owner · resource

Gap	Owner	Subject	Family	Message
high permission-sprawl-risk	BI Platform	/tableau/sites/executive-analytics/projects/board-distribution board-distribution	Permissions	Permission sprawl is active on "board-distribution" and should be contained before the next Tableau review packet closes.
high group-sync-gap	Identity Operations	/tableau/sites/executive-analytics/groups/executive-readers executive-readers	GroupSync	Directory group sync is degraded on "executive-readers" and stale Tableau entitlements should be cleaned before the next audit review.
high certification-drift	Reporting Operations	/tableau/sites/finance/datasources/month-close-certified month-close-certified	Certification	Certification drift is active on "month-close-certified" and the reviewed Tableau owner or lineage proof is no longer fully trustworthy.
high external-sharing-risk	RevOps Reporting	/tableau/sites/executive-analytics/workbooks/partner-revenue-summary partner-revenue-summary	ExternalSharing	External sharing risk is active on "partner-revenue-summary" and partner-facing Tableau access could still be wider than approved.
high telemetry-gap	Platform Operations	/tableau/sites/finance/audit/site-activity site-activity-audit	Telemetry	Audit telemetry coverage is broken on "site-activity-audit", weakening Tableau permission evidence and review continuity.
medium stale-snapshot	RevOps Reporting	/tableau/sites/finance/projects/month-close	—	Permission snapshot for "Finance publishing permissions snapshot" is stale and should be regenerated before certifying access posture.
medium ownership-handoff-gap	Reporting Operations	/tableau/sites/finance/workbooks/month-close-board-pack month-close-board-pack	Ownership	Ownership handoff is still manual on "month-close-board-pack", which weakens certification and permission confidence.
low stale-remediation-window	RevOps Reporting	/tableau/sites/finance/datasources/month-close-certified month-close-certified	Certification	Drift on "/tableau/sites/finance/datasources/month-close-certified" has remained unresolved for 29 hours.
low stale-remediation-window	RevOps Reporting	/tableau/sites/finance/audit/site-activity site-activity-audit	Telemetry	Drift on "/tableau/sites/finance/audit/site-activity" has remained unresolved for 36 hours.
low stale-remediation-window	RevOps Reporting	/tableau/sites/finance/workbooks/month-close-board-pack month-close-board-pack	Ownership	Drift on "/tableau/sites/finance/workbooks/month-close-board-pack" has remained unresolved for 31 hours.